Hashproof

io.github.csacanamPublished by GitHub account csacanamv0.1.2Updated Oct 24, 2026

Issue verifiable credentials from AI agents for $0.10 via x402. On-chain on Celo, IPFS-pinned.

VerifiedSTDIODesktop onlyFinance Security & Monitoring

Server details

Identifier: io.github.csacanam/hashproof
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account csacanam for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.csacanam%2Fhashproof.svg)](https://sourceweft.com/mcp/io.github.csacanam%2Fhashproof?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

HashProof's local MCP server lets an AI assistant preview credential templates, issue verifiable credentials for $0.10 in USDC, and verify credentials.

What you can do: Preview credential templates and generate watermarked preview PDFs at no cost, and look up the required fields for a template by reference. Issue a verifiable credential, paid per call in USDC via x402 or with a prepaid API key. Verify a credential through the three-layer check and read on-chain credential counters. Issued credentials are stored as JSON, backed up on IPFS and registered in a Celo smart contract.
When to use it: Use it when an assistant needs to create or check verifiable credentials, such as issuing a certificate to a person or confirming that an existing credential is valid, without a human onboarding flow.
Requirements: Runs locally as an npm package over stdio via npx, so Node.js is needed. Issuing requires one of two payment methods: HASHPROOF_API_KEY (prepaid key) or HASHPROOF_WALLET_PRIVATE_KEY (an EVM wallet holding USDC on Base or Celo). HASHPROOF_X402_NETWORK selects base (default) or celo. Network access is needed for the API, IPFS and Celo.

Before you install

The server asks for a wallet private key (HASHPROOF_WALLET_PRIVATE_KEY) or a prepaid API key (HASHPROOF_API_KEY); a private key controls funds, so use a dedicated wallet with limited USDC. Issuing spends $0.10 USDC per credential. Issuing writes data: credentials are stored, pinned to IPFS and registered on-chain, which is hard to undo. Verification requests are listed at $49 USDC.

Installation

In SourceWeft

Open Hashproof in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

HashProof

Verifiable credentials with IPFS backup, on-chain registry, and pay-per-call API via x402.

What it is

HashProof is a credential issuance API. Organizations and Individuals (entities) issue verifiable credentials to people. Each credential is:

Stored as a JSON in the database and backed up on IPFS (Pinata)
Registered on-chain in the CredentialRegistry contract on Celo
Verifiable via a public URL: https://hashproof.dev/verify/:id

Two ways to pay: micropayment in USDC via x402 (Base or Celo) — no API keys, no subscriptions — or a prepaid API key for enterprise clients (no crypto needed). AI agents can call the API directly using a funded wallet.

Project structure

backend/       Express API — credential issuance, verification, paymentsfrontend/      React app — landing page, credential verification, entity pagescontracts/     CredentialRegistry smart contract (Celo)mcp/           MCP server (hashproof-mcp on npm) — use HashProof from any AI agentskills/        Agent skill (npx skills add csacanam/hashproof)docs/          Architecture and flow documentation

backend/       Express API — credential issuance, verification, paymentsfrontend/      React app — landing page, credential verification, entity pagescontracts/     CredentialRegistry smart contract (Celo)mcp/           MCP server (hashproof-mcp on npm) — use HashProof from any AI agentskills/        Agent skill (npx skills add csacanam/hashproof)docs/          Architecture and flow documentation

Deployed contracts

Paid API endpoints

Payment is in USDC on Base or Celo via x402. The client signs an off-chain authorization — no gas required.

Free endpoints

Endpoint	Description
`GET /verify/:id`	Full 3-layer verification
`GET /templates/:ref/requirements`	Get required fields for a template
`POST /templates/:ref/preview`	Generate a preview PDF with watermark (no cost)
`GET /stats`	On-chain credential counters

For AI agents

HashProof is fully agent-usable — no account, no human onboarding. Three ways in:

MCP server, local or remote (listed on the official MCP registry as io.github.csacanam/hashproof):

bash

# local (stdio) — pays per credential with your own wallet via x402, or an API keyclaude mcp add hashproof -- npx -y hashproof-mcp
# remote (Streamable HTTP) — nothing to install, API key required to issueclaude mcp add --transport http hashproof https://api.hashproof.dev/mcp

# local (stdio) — pays per credential with your own wallet via x402, or an API keyclaude mcp add hashproof -- npx -y hashproof-mcp
# remote (Streamable HTTP) — nothing to install, API key required to issueclaude mcp add --transport http hashproof https://api.hashproof.dev/mcp

Tools: preview_template (free — iterate custom layouts), issue_credential ($0.10 via x402 or API key), verify_credential and get_template_requirements (free). The remote server has no wallet, so it can't do x402 — it needs Authorization: Bearer <api-key>. See mcp/README.md.

Agent skill: npx skills add csacanam/hashproof — or read it at hashproof.dev/skill.md.
Plain HTTP + x402: POST /issueCredential returns a 402 challenge any x402-v2 client can pay (USDC on Base or Celo). LLM index: hashproof.dev/llms.txt.

Agent identity metadata (ERC-8004 registration-v1): hashproof.dev/metadata.json.

Quick start

See backend/README.md and frontend/README.md for setup instructions. See docs/README.md for the full documentation index.

Source: README.md at commit 67aff5e

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v0.1.2LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts
Declare a license in the repository or the registry entry.